User Tools

Site Tools


network_stuff:flow_information

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
network_stuff:flow_information [2023/07/28 09:04] jotasandokunetwork_stuff:flow_information [2023/11/02 14:38] (current) – external edit 127.0.0.1
Line 27: Line 27:
    ip flow monitor Flow-monitor sampler Flow-sampler input    ip flow monitor Flow-monitor sampler Flow-sampler input
        
-Netflow in ubuntu or FRR:+Netflow in ubuntu or FRR (agent):
 \\ \\
   FRR01:~# systemctl status pmacctd.service   FRR01:~# systemctl status pmacctd.service
Line 58: Line 58:
   pre_tag_map: /etc/pmacct/pretag.map   pre_tag_map: /etc/pmacct/pretag.map
   timestamps_secs: true   timestamps_secs: true
-  + 
 +SFLOW collector: 
 +  * The default open source collector is : [[http://www.pmacct.net/]]
  
 ---- ----
 **__SFLOW__** **__SFLOW__**
 +  * sampled frames + interface counter + flow-tuple data. All in the same packet
 +  * sflow is configurable via SNMP mibs
 +
 +  * Flow sample (conceptually one in each sflow packet but in reality we pack more than 1). It lists things like: ingress egress. ifindex and  <del>sampling rate</del>
 +    * Flow record (the frame header with a little bit of metadata (like header protocol (eg: Ethernet))
 +
 +
 \\ \\
  SFLOW IN LINUX / FRR:  SFLOW IN LINUX / FRR:
Line 134: Line 143:
   set protocols sflow collector 2.2.2.2 udp-port 6343   set protocols sflow collector 2.2.2.2 udp-port 6343
   set protocols sflow interfaces xe-0/0/0:0.0   set protocols sflow interfaces xe-0/0/0:0.0
 +  
 +In Cisco (IOS-XR): [[https://blog.sflow.com/2022/02/cisco-ncs-5500-series-routers.html]]
network_stuff/flow_information.1690535040.txt.gz · Last modified: (external edit)